Privacy protection will not happen as a result of ongoing IT activities and are not covered in these budgets either. Privacy protection requires a mandate that "sits on top of the organization" and isn't docked somewhere in a department. So, what is the annual budget for privacy protection?